Privacy Policy

---

The Owner informs you about its Privacy Policy regarding the treatment and protection of personal data of users that may be collected while browsing through the Website https://martin-schenk.es.

In this sense, the Owner guarantees compliance with current legislation on the protection of personal data, reflected in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons (GDPR), as well as Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

The use of the website implies acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.

Identity of the Responsible

• Responsible:  Martin Schenk S.L.
• NIF: B84645654
  Registered in the Commercial Registry of Madrid, volume 22655, book 0, section 8, sheet 71, page M-405160, inscription.
• Address:  Calle Claudio Coello 14, Madrid - España.
• Email:  contacto@martin-schenk.es
• Website:  https://martin-schenk.es

Principles applied in data processing

In the treatment of your personal data, the Owner will apply the following principles that comply with the requirements of the new European Data Protection Regulation (GDPR):

• Principle of lawfulness, fairness and transparency: The Owner will always require your consent for the processing of your personal data for one or more specific purposes that will be previously informed with complete transparency.
• Principle of purpose limitation: The Owner will collect your personal data for the purposes specified exclusively and will not process them subsequently in a manner incompatible with those purposes.
• Principle of data minimisation: The Owner will collect only the data strictly necessary in relation to the purposes for which it requires them.
• Principle of accuracy: Your personal data must be accurate and always up to date.
• Principle of storage limitation: Your personal data will only be maintained in a way that allows your identification for the time necessary for the purposes of its processing.
• Principle of integrity and confidentiality: Your personal data will be processed in a way that guarantees their security and confidentiality.
• Principle of proactive responsibility: The Owner will be responsible for ensuring that the above principles are complied with.

Obtaining Personal Data

To browse the Website, it is not necessary to provide any personal data.

The cases in which you do provide your personal data are the following:

• When contacting through the contact forms or sending an email.
• When registering on the Website to access exclusive content or services.
• When subscribing to newsletters or promotional communications.

Your rights

The Owner informs you that you have the right to:

• Request access to your personal data.
• Request the rectification or deletion.
• Request the limitation of their treatment.
• Oppose the treatment.
• Request the portability of your data.

The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly from the Owner, which means that any client, subscriber or collaborator who has provided their data at any time, can contact the Owner and request information about the data stored and how they have been obtained, request their rectification, oppose the treatment, limit their use or request the deletion of such data in the Owner's files.

To exercise your rights you must send your request along with a photocopy of your National Identity Document or equivalent to the email address: contacto@martin-schenk.es.

The exercise of your rights does not include any data that the Owner is obliged to keep for administrative, legal or security purposes.

You have the right to effective judicial protection and to file a claim with the supervisory authority, in this case, the Spanish Agency for Data Protection, if you consider that the processing of personal data concerning you violates the Regulation.

Purpose of the processing of personal data

When you connect to the Website to send an email to the Owner, subscribe to their newsletter or make a contract, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, name and surname, physical address, email address, phone number, and other information. By providing this information, you give your consent for your information to be collected, used, managed and stored by the Owner, only as described in the Legal Notice and in this Privacy Policy.

The personal data and the purpose of the treatment by the Owner are different depending on the information capture system:

• Contact forms: The Owner requests personal data including: name and surname, email address, phone number and website address with the purpose of responding to your queries. For example, the Owner uses this information to respond to your messages, doubts, complaints, comments or concerns that you may have regarding the information included on the Website, the services provided through the Website, the treatment of your personal data, questions regarding the legal texts included on the Website, as well as any other queries you may have and that are not subject to the conditions of the Website.

Security of personal data

To protect your personal data, the Owner takes all reasonable precautions and follows the best practices in the industry to prevent their loss, misuse, improper access, disclosure, alteration or destruction.

The Website is hosted on servers within the European Union. The servers are provided by our hosting service provider, which maintains appropriate security levels to protect your data.

To make payments on the Website (if applicable), we work with secure payment platforms that are hosted on secure servers and use encryption technology to protect financial data.

However, you should be aware that no security system is impenetrable. We cannot guarantee the absolute security of our database, nor can we guarantee that the information you provide will not be intercepted while being transmitted to us over the Internet.

Only personnel authorized by the Owner, who have committed to maintain the confidentiality of the information, will have access to your personal data.

Content from other websites

The pages of this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Cookie Policy

To improve your experience on our Website, the Owner may use cookies. You can consult the Cookie Policy here.

Advertising

On the Website, the Owner may display third-party advertisements. These advertisers may collect information about your visits to the Website to provide you with advertisements about goods and services that may interest you.

Legal basis for data processing

The legal basis for the processing of your data is:

• Consent of the interested party for contact and consultation purposes.
• The legitimate interest of the Owner to respond to queries and provide requested information.

Categories of personal data

The categories of personal data that the Owner processes are:

• Identification data: name, surname, email, telephone.
• Navigation data: IP address, browser type, visit duration.

Data retention period

The personal data provided to the Owner will be kept:

• As long as the business relationship is maintained or you do not request their deletion.
• For the time necessary to comply with legal obligations.

Blog newsletter

Purpose: to send you an email when a new blog post is published. No advertising, no automated sequences, no third party messages.

Legal basis: your consent (Art. 6(1)(a) GDPR), given when you confirm your subscription.

Data processed: your email address and, as proof of consent, the date, time and IP address from which you confirmed.

Double opt in: after submitting the form you receive an email with a confirmation link. Your address is not added to the list until you click it. Without confirmation the provisional record is deleted.

Recipients: emails are sent through Amazon Web Services EMEA SARL (Amazon SES) as processor, with servers in the European Union (Frankfurt). No other third party receives your data.

Retention: until you unsubscribe. When you do, your address is deleted from the list; only an irreversible hash of it plus the date is kept, as proof of the unsubscription and so you are never contacted again by mistake.

Unsubscribe and your rights: you can unsubscribe at any time with one click via the link at the bottom of every email, no reason needed. You can also exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to contacto@martin-schenk.es, and lodge a complaint with the Spanish data protection authority (AEPD).

No tracking: these emails contain no tracking pixels and no measured links. Whether you open a mail or what you click is not recorded.

Recipients and data processors

Your personal data may be communicated to the following categories of recipients:

• Public administrations: for compliance with legal obligations (tax authorities, social security, etc.).

To deliver the contracted services (web development, hosting, servers, domains, email) we engage the following data processors, all of them located in the European Union or subject to equivalent guarantees (EU Standard Contractual Clauses):

• Hetzner Online GmbH (Germany) — infrastructure provider: cloud servers, VPS, web hosting and WordPress hosting, including backups. Privacy policy.
• Soluciones Corporativas IP, S.L. (DonDominio) (Spain) — ICANN-accredited domain registrar. Privacy policy.
• Stripe Payments Europe, Ltd. (Ireland) — payment processing for cards and subscriptions. Full card data is not stored on our servers. Privacy policy.
• Mailgun Technologies, Inc. (EU servers) — transactional email delivery (account notifications, receipts, technical alerts). Privacy policy.
• Cloudflare, Inc. — content delivery network (CDN), DNS and DDoS protection on selected zones. Edge servers in the EU. Privacy policy.

A data processing agreement under Art. 28 GDPR is in place with each of these providers. If you are a customer and need a signed copy of the Data Processing Agreement (DPA), please write to contacto@martin-schenk.es and we will provide it.

Note: This website does not use cookie-based tracking services (such as Google Analytics).

Domain registration and WHOIS data

When you register or transfer a domain through us, the holder's contact data and the administrative contact (name, postal address, email and phone) are transmitted to the accredited registrar (DonDominio) and to the corresponding TLD registry (e.g. Verisign for .com/.net, Red.es for .es, EURid for .eu, DENIC for .de). This transmission is mandatory under ICANN rules and the policies of each registry and is essential for the domain to become active in your name.

Depending on the TLD, these data may be partially published in public WHOIS/RDAP databases. For domains that allow it, we offer free WHOIS protection that masks the holder's personal data.

You are required to keep your WHOIS data accurate and up-to-date (ICANN requirement). Incorrect or non-verifiable data may lead to suspension of the domain by the registry.

Navigation data

When browsing the Website, certain non-identifying data may be collected by the server, including the IP address (anonymized), browser type, and operating system. This data is used solely for technical operation of the website and is not shared with third parties.

Accuracy and veracity of personal data

You agree that the data provided to the Owner are correct, complete, accurate and current, as well as to keep them duly updated.

As a User of the Website, you are solely responsible for the veracity and correctness of the data you send to the Website, exonerating the Owner from any responsibility in this regard.

Acceptance and consent

As a User of the Website, you declare that you have been informed of the conditions on the protection of personal data, and you accept and consent to their treatment by the Owner in the manner and for the purposes indicated in this Privacy Policy.

Changes in the Privacy Policy

The Owner reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments, as well as to industry practices.

These policies will be in effect until they are modified by other duly published policies.